A mass attack ongoing for the past month against Linux Apache Web servers has become increasingly successful because its break-in method makes use of an automated password and installation process, according to a security researcher monitoring its progress.
Don Jackson, senior security sesearcher at SecureWorks, says the attack, which was first thought to have compromised several hundred Web sites, has hit at least 10,000. He says the attack relies on making use of stolen passwords to Linux Apache servers by automating the installation process to force it to serve up attacks against vulnerabilities on Windows clients. "The Web server ends up serving up vulnerabilities from 2006 related to Windows malware," Jackson says. "The whole attack is very mysterious. It's based on a botnet but it doesn't match the Russian and Chinese groups and may be Western Europe or North American."
View: The full story @ PCWorld
Don Jackson, senior security sesearcher at SecureWorks, says the attack, which was first thought to have compromised several hundred Web sites, has hit at least 10,000. He says the attack relies on making use of stolen passwords to Linux Apache servers by automating the installation process to force it to serve up attacks against vulnerabilities on Windows clients. "The Web server ends up serving up vulnerabilities from 2006 related to Windows malware," Jackson says. "The whole attack is very mysterious. It's based on a botnet but it doesn't match the Russian and Chinese groups and may be Western Europe or North American."
View: The full story @ PCWorld
Got 2 XP pcs, one with SP1 and one without a SP. Both have firewalls, neither have anti-virus and they haven't got a virus between them. Keeping up to date isn't everything. My brother has SP2 and hes had to low-level format so many times I've lost count, last time I formatted was about 2 years ago when I got an ASUS motherboard and SATA h/d
Got 2 XP pcs, one with SP1 and one without a SP. Both have firewalls, neither have anti-virus and they haven't got a virus between them. Keeping up to date isn't everything. My brother has SP2 and hes had to low-level format so many times I've lost count, last time I formatted was about 2 years ago when I got an ASUS motherboard and SATA h/d
Not just a format but a Low level format ay? and 2nd I wouldn't go around bragging you are using xp with an out of date service pack and no service pack at all. Most people would consider you an idiot
qrrbirlbelibrijlijsd83jfs838@Q@*
Believe it or not, I've actually used that one before.
I can see someone using it to log into his neowin account right now
It seems as if this "attack" requires root ssh access to the machine, which overshadows this so called apache "exploit." If you have a machine facing the internet with ssh access and an easily root password, then you've got more important things to worry about.
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.